Description
Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Feedweb Unspecified Vulnerability (3.0.10)
WordPress Plugin Essential Grid Portfolio-Photo Gallery Security Bypass (1.1.2)
WordPress Plugin ThinkIT WP Contact Form Multiple Vulnerabilities (0.2)
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0219)
WordPress Plugin Dialog Contact Form Cross-Site Scripting (1.2.0)